Sign-in code
A six-digit code from an authenticator app on your phone, asked for after your password when you sign in. With it, someone who has learnt your password still cannot get in without your phone.
Optional for now. Nobody has to use a sign-in code yet. People with admin rights will be required to use one later, from a date the Director will announce.
Where you stand
Reading your sign-in settings.
Set up or remove
You need an authenticator app on your phone: Google Authenticator, Microsoft Authenticator, or any app that shows six-digit codes. Setting up takes about a minute.
Link your authenticator app
- Open the authenticator app on your phone and choose to add an account.
- Scan this picture with the app.
- Cannot scan it? Type this key into the app instead:
- Type the six-digit code the app now shows, below.
Changing phones, or no longer want the code? Remove the authenticator, then set up a new one. You will need a current code from the app to remove it, so that nobody using a session you left open can take it away.
Lost the phone with the app on it? Tell the Director: the authenticator can be removed for you from the system's sign-in settings.
Not on this screen
This is one person's own sign-in setting, so there is no dashboard, register, search or report here: each person sees only their own. No approval: setting up or removing your authenticator is yours to do, and removing it asks for a current code instead. Activity and the audit trail: every set-up, code check and removal is written to the sign-in service's own log, not to the ERP's audit log. Documents: none belong to it. Who has set up an authenticator will be reported to the Director in a later step.